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Amendments to the Claims: 

Please amend the claims as shown below. This Listing of Claims will replace prior 
versions, and listings, of claims in the application. 

Listing of Claims: 

1 . (previously presented) An exponent calculation apparatus for calculating 
based on two integers x and e, the apparatus comprising: 

an input unit for inputting the two integers x and e; 

a candidate exponents storing unit for storing candidate exponents {l_i} 
(0<i<L-1), the number of the candidate exponents being L; 

a pre-calculation unit for pre-calculating x'^{l_i} for each of the candidate 
exponents {l_i}, which are stored in the candidate exponents storing unit, based on 
the input integer x; 

a pre-calculated values storing unit for storing the values y.^{\J} obtained by 
the pre-calculation; 

a dividing unit for dividing the input integer e into a plurality of values {f_i} 
(0<i<F-1 ) so that each of the values {f_i} corresponds to one of the candidate 
exponents {l_i}; 

a calculation result storing unit for storing a calculation result c; 

a sequential processing unit for sequentially updating the calculation result c 
for each of the divided values {f_i} (0<i<F-1 ) by using each of the pre-calculated 
values x'^{l_i}; and 

an output unit for outputting the calculation result c as x^ after the calculation 
result c is updated for all the values {f_i} as x^. 
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2. (previously presented) An exponent calculation apparatus for calculating 
xe(mod N) based on three integers x, e, and N, the apparatus comprising: 

an input unit for inputting the three integers x, e, and N; 

a candidate exponents storing unit for storing candidate exponents {l_i} 
(0<i<L-1), the number of the candidate exponents being L; 

a pre-calculation unit for pre-calculating x'^{l_i} for each of the candidate 
exponents {l_i}, which are stored in the candidate exponents storing unit, based on 
the input integer x; 

a pre-calculated values storing unit for storing the values x'^{l_i} obtained by 
the pre-calculation; 

a dividing unit for dividing the input integer e into a plurality of values {fj} 
(0<i<F-1 ) so that each of the values {f_i} corresponds to one of the candidate 
exponents {l_i}; 

a calculation result storing unit for storing a calculation result c; 

a sequential processing unit for sequentially updating the calculation result c 
for each of the divided values {f_i} (0<i<F-1 ) by using each of the pre-calculated 
values x'^{l_i}; and 

an output unit for outputting the calculation result c as x^{mod N) after the 
calculation result c is updated for all the values {f_i} as xe(mod N). 

3. (previously presented) The apparatus according to Claim 2, wherein the 
sequential processing unit comprises: 

an initializing unit for setting f 0, which is an initial value of the calculation 
result c, in the calculation result stohng unit; and 

an updating unit for sequentially updating c:=c2 as many times as a number of 
a bit length of each of the divided values {f_i} (0<i<F-1) in binary notation and 
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updating c:=c*f_i. 

4. (original) Tine apparatus according to Claim 2, wherein the candidate 
exponents stored in the candidate exponents storing unit have a form of (0) or 1[01]l 
in binary notation, where [xy]| means that xy is repeated i times. 

5. (original) The apparatus according to Claim 2, wherein the candidate 
exponents stored in the candidate exponents storing unit have a form of (0), (11), or 
1 [01]|_ in binary notation, where [xy]| means that xy is repeated i times. 

6. (original) The apparatus according to Claim 2, wherein the dividing unit 
divides (10) in a bit string of the divided values represented in binary notation into 
(01) and (01) so that the values {f_i} may be overlapped, and, in an updating 
process of c:=c^ by the sequential processing unit, an overlapped portion of bit 
length of the values fj is not updated. 

7. (original) The apparatus according to Claim 2, further comprising: 
a multiplication number estimating unit for estimating the number of 

multiplications according to division performed by the dividing unit; and 

a division controlling unit for controlling division performed by the dividing unit 
based on the estimated number of multiplications. 

8. (original) The apparatus according to Claim 7, wherein the multiplication 
number estimating unit estimates the number of multiplications by assigning different 
weights to multiplication of different values and multiplication of same values. 
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9. (original) The apparatus according to Claim 2, wherein the number L of the 
candidate exponents, which are stored in the candidate exponents storing unit, is 
increased or decreased depending on the bit length of the input value e. 

10. (original) The apparatus according to Claim 2, wherein each of the 
candidate exponents stored in the candidate exponents storing unit is 0 or a binary 
number of W bits or less, and has a form 1 [01 1 1 [01 or 1 [01 ]i_1 , where [xy]| 
means that xy is repeated i times. 

1 1 . (original) The apparatus according to Claim 1 0, 

wherein the pre-calculation unit uses four functions f-|(), f2(), fsQ, and f4(), 
which represent the candidate exponents, 

sets initial values: fi(0)=1 , f2(0)=0, f3(0)=1 , and f4(0)=1 , 

performs circular calculation so as to satisfy fi(i)=f2(i-1)+f4(i-1), f2(i)=f 1(0+^3(1- 
1). f3(i)=f2(i)+f3(i-1). and f4(i)=fi(i)+f2(i) and obtains forms fi(i)=1[01]i, f2(i)=10[00]i, 
f3(i)=11[01]|, and f4(i)=1[01]|1 so as to form an addition chain, 

calculates x^^i^ based on the product of xf2(i-i) and xf4(i-i), xf2(i) based on the 
product of xfi(i) and xf3(i-i), xf3(i) based on the product of xf2(i) and xf3(i-i), and xf4(i) 
based on the product of xfi(i) and xf2(i), and 

stores the calculation result in the calculation result storing unit. 

1 2. (original) The apparatus according to Claim 1 0, 

wherein the calculation result storing unit includes four array regions F^O, 
FaO. FaO, and F4() for storing calculation results and sets initial values Fi(0)=x, 
F2(0)=1 , F3(0)=x, and F4(0)=x, and 

the pre-calculation unit performs circular calculation so as to satisfy Fi(i)=F2(i- 
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1 )*F4(i-1 ), F2(i)=Fi (i)*F3(i-l ), F3(i)=F2(i)*F3(i-1 ), and F4(i)=Fi (i)*F2(i) and stores the 
calculation result in the calculation result storing unit. 

1 3. (original) The apparatus according to Claim 1 0, wherein the bit number W 
of each of the candidate exponents stored in the candidate exponents storing unit is 
changed in accordance with the bit number of the integer e. 

14-17 (canceled) 
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